Network Architect

Leidos is seeking a highly skilled Network Architect to join our team at our headquarters. As a key member of our Defense Enclave Services (DES) team, you will play a critical role in designing and implementing secure network solutions for our clients.

• Design and Implementation: Plan and design secure network solutions to consolidate connectivity services under an enterprise service.
• Collaboration and Stakeholder Management: Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and unique requirements to develop a design and architecture leveraging approved design patterns.
• Network Security: Design secure wide area connectivity inclusive of underlay, overlay, and COI transport design that supports performance, quality of service, security, and mission requirements.
• Access Solutions: Provide secure access solutions leveraging wired and wireless technologies, integrating standards, use cases/scenarios, and develop associated implementation and transition plans.
• Capacity Planning: Integrate capacity planning and scaling of network and security stack environments into the overall design of solutions.
• Network Optimization: Collect, investigate, and identify network optimization strategies and techniques to meet capacity and performance standards.
• Legacy Service Path Analysis: Identify legacy service paths (i.e. dataflow, firewall rulesets, and ACLs) and develop strategies and designs for the to-be enterprise service capability to meet requirements while balancing security, sustainability, and maintainability.
• IP Addressing: Support development of IP addressing schemes across IPv4 and IPv6 networks.
• Information Assurance: Work with information assurance teams to ensure compliance to DoD standards to assist with providing accreditation artifacts.

• Education and Experience: Minimum of a Bachelor's degree in Science, Technology, Engineering and Math (preferred) with 12-15 years' experience or Master's degree with 10-13 years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).
• Network Certification: Require network certification which shall meet or exceed a CCNA (comparable vender certification accepted upon review).
• Security Clearance: Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.
• Technical Skills: Experienced and comfortable with conducting technical troubleshooting to resolve issues. Experience conducting site surveys or analyzing data obtained from site surveys. Experience creating or executing a migration plan to move circuits, network traffic, services, applications, or data between environments or to a commercial cloud provider. Alternatively, experience planning or executing a technology refresh or lifecycle refresh of an existing I/T system.
• Vendor Experience: Heavily experienced in upgrading and LCR of network devices. Must have broad exposure to common I/T infrastructure networking in the areas of LAN, WAN, TCP/UDP, IPSec, VPN, Proxies, Routing(L2/L3), and Firewalls. Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, and Fortinet.
• Communication Skills: Excellent written and verbal communication skills. This shall include drafting SOPs and technical documentation. Requires ability to communicate with executive leadership (internally or client) regarding matters of significant important to the organization/project.

• Certifications: Certified Cisco Network Professional (CCNP) or equivalent.
• Enterprise Network Management Tools: Demonstrate experience in one or more of the following enterprise network management tools such as PaloAlto Panorama, SolarWinds, Cisco Prime, Cisco DNA, What's Up Gold, or Junos Space.
• VTC Solutions: Experience in designing and implementing VTC solutions.
• SD-WAN: Hands on experience with SD-WAN.
• DoD Security Requirements: Expert knowledge of DoD security requirements for network infrastructure.
• System Hardening: Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation.